Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: ErFtx/7g7MFCee9ZDl/rUkuPEDV1GaPM58xQXUNogrY=
Subject key identifier: 56:0C:DA:D3:FA:7E:65:44:F9:A2:99:86:F3:81:62:9E:E0:0E:30:59
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019F91DAE1B9A9EDFF9EA44E7A1C655395AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0F22
Signing time: Fri 24 Jul 2026 02:01:08 +0000
Manifest this update: Fri 24 Jul 2026 02:01:08 +0000
Manifest next update: Sat 25 Jul 2026 02:01:08 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: Hrip0TRCoJjDXN1Ffx7ICTeBdEgNerEa9vGaMju6KDE=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e1:b9:a9:ed:ff:9e:a4:4e:7a:1c:65:53:95:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jul 24 02:01:08 2026 GMT
Not After : Jul 25 02:01:08 2026 GMT
Subject: CN=560cdad3fa7e6544f9a29986f381629ee00e3059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:15:d8:a0:11:9e:bd:24:7e:6d:51:4c:de:
ab:07:f3:28:fb:58:e4:57:2f:97:84:c1:40:1b:a3:
92:e7:40:5b:94:5f:d9:75:02:71:06:d7:ac:cc:5c:
09:e9:2f:8a:09:5a:bf:ec:ca:19:57:40:17:1a:b7:
40:8e:51:29:10:f7:e1:8b:6d:d9:06:48:9c:7a:1e:
de:cc:ef:8c:23:e0:60:4b:36:2d:7e:59:6b:c5:5e:
90:89:8b:23:02:be:ad:14:9e:0f:4e:ce:cc:0c:ec:
05:8d:7a:b0:68:ea:7c:f1:00:e4:ac:3c:83:14:57:
08:b2:e9:d3:f8:db:94:7a:87:15:6c:8d:56:3d:9e:
7e:86:87:df:2a:c2:40:18:c2:c0:61:76:84:3c:e8:
5a:b5:7f:66:15:70:de:03:ad:4f:0f:d4:4c:65:db:
2b:82:a5:69:e2:bb:f5:f7:c6:f4:f6:43:7d:a3:54:
d3:9d:74:05:62:e1:59:62:0e:42:e9:be:5c:54:4b:
e1:05:fa:8e:cc:76:06:8f:d5:0a:61:90:fe:a7:cc:
1a:b8:cb:1d:c8:0b:a1:bd:75:9c:d7:a7:83:8d:cd:
15:ec:ba:08:04:fe:50:07:d0:ff:63:6e:b4:44:d6:
5e:d2:f7:58:63:8c:d8:57:3f:72:81:c9:ba:c5:f2:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0C:DA:D3:FA:7E:65:44:F9:A2:99:86:F3:81:62:9E:E0:0E:30:59
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7e:78:1b:01:2b:83:57:e8:af:b2:85:6a:7e:88:41:87:91:
6f:48:cb:5d:03:f0:e6:4b:33:6e:aa:11:df:ea:04:4d:d7:a2:
60:ad:6a:5a:1c:38:32:22:63:96:61:f8:f0:1d:77:c8:9c:d2:
4c:17:2a:9b:a0:ef:09:e5:5f:55:4c:9b:27:1b:db:e4:67:c5:
2c:19:c7:84:70:22:9d:a9:7a:79:d3:64:38:21:e4:e3:22:e1:
97:3b:40:04:43:58:af:fa:3f:4c:aa:7c:33:1f:d3:0d:cf:ee:
ed:2c:4e:9f:44:c2:06:93:06:d8:47:4c:6c:2e:8d:ed:dd:fc:
83:c5:d9:98:86:47:fa:f3:f7:a9:00:14:6a:cc:d5:40:4a:d1:
f4:39:af:a6:c1:b0:6c:db:a0:7f:72:e2:cc:43:f4:89:9c:a1:
d8:e8:ac:84:fd:e4:ec:37:7d:e4:f1:69:f5:cc:84:c0:c6:47:
d0:35:53:a4:4d:9a:08:e6:40:37:3a:b1:d7:99:6f:a2:e8:09:
d8:0f:8b:30:4c:2c:98:79:9b:e2:c8:a6:1c:7e:43:60:d8:23:
cd:de:6e:88:4d:f9:8a:cc:be:da:24:cb:fc:cc:27:2d:96:3c:
ef:43:c7:d4:1c:42:ea:47:76:37:d8:6c:a2:d6:59:df:f4:30:
9c:bd:e5:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2uG5qe3/nqROehxlU5WuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx
NTY2MzIwHhcNMjYwNzI0MDIwMTA4WhcNMjYwNzI1MDIwMTA4WjAzMTEwLwYDVQQD
Eyg1NjBjZGFkM2ZhN2U2NTQ0ZjlhMjk5ODZmMzgxNjI5ZWUwMGUzMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztcV2KARnr0kfm1RTN6rB/Mo+1jk
Vy+XhMFAG6OS50BblF/ZdQJxBteszFwJ6S+KCVq/7MoZV0AXGrdAjlEpEPfhi23Z
Bkiceh7ezO+MI+BgSzYtfllrxV6QiYsjAr6tFJ4PTs7MDOwFjXqwaOp88QDkrDyD
FFcIsunT+NuUeocVbI1WPZ5+hoffKsJAGMLAYXaEPOhatX9mFXDeA61PD9RMZdsr
gqVp4rv198b09kN9o1TTnXQFYuFZYg5C6b5cVEvhBfqOzHYGj9UKYZD+p8wauMsd
yAuhvXWc16eDjc0V7LoIBP5QB9D/Y260RNZe0vdYY4zYVz9ygcm6xfIRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYM2tP6fmVE+aKZhvOBYp7gDjBZMB8GA1UdIwQY
MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt
MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl
LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm354GwEr
g1for7KFan6IQYeRb0jLXQPw5kszbqoR3+oETdeiYK1qWhw4MiJjlmH48B13yJzS
TBcqm6DvCeVfVUybJxvb5GfFLBnHhHAinal6edNkOCHk4yLhlztABENYr/o/TKp8
Mx/TDc/u7SxOn0TCBpMG2EdMbC6N7d38g8XZmIZH+vP3qQAUaszVQErR9DmvpsGw
bNugf3LizEP0iZyh2OishP3k7Dd95PFp9cyEwMZH0DVTpE2aCOZANzqx15lvougJ
2A+LMEwsmHmb4simHH5DYNgjzd5uiE35isy+2iTL/MwnLZY870PH1BxC6kd2N9hs
otZZ3/QwnL3l4A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:30 2026 by rpki-client